Stripe Agent Toolkit for AI Payment Integration
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The claimed purpose is coherent with Stripe integration, and Stripe appears to be the legitimate upstream project, but this skill is mainly a transitive installer that delegates trust to a third-party skill registry while enabling financially consequential actions. Risk is driven more by transitive installation and payment authority than by clear evidence of malware.
Confidence: 83%Severity: 68%
Audit Metadata